sentry-android-sdk
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard shell commands including
ls,grep,find, andxargsto identify the project structure (Kotlin/Java), build system (Gradle Groovy/KTS/Version Catalog), and library dependencies (OkHttp, Room, Compose). These discovery commands are intended to customize the SDK integration advice and do not target sensitive system files. - [REMOTE_CODE_EXECUTION]: The skill suggests running the official Sentry setup tool using
npx @sentry/wizard@latest -i android. The instructions clarify that the user should execute this manually in their terminal because it requires interactive browser-based authentication. This is a standard deployment pattern for the platform's vendor. - [EXTERNAL_DOWNLOADS]: The skill references the Sentry Bill of Materials (BOM) and optional integration modules (e.g.,
io.sentry:sentry-android-timber) from official Maven repositories. These are legitimate resources owned by the skill author. - [CREDENTIALS_UNSAFE]: The configuration examples utilize placeholders like
YOUR_SENTRY_DSNand correctly recommend the use of environment variables (SENTRY_AUTH_TOKEN) for build-time secrets in CI/CD environments, following security best practices.
Audit Metadata